Privacy Policy

1. Who is responsible for your data

The data controller within the meaning of Art. 4(7) GDPR is:

This policy covers the “Dardania Live” app for iPhone (App Store), the Android app (com.dardanialive.app) and our websites.

2. Short summary

• You can use the app without an account. Browsing cities, venues and events requires no sign-up and no personal data.
• Your data is stored inside the European Union — on our servers in Ireland.
• You only create an account if you want to save favourites, make reservations, or manage a business or institution.
• We do not track you for advertising. The app contains no ad networks, no cross-app tracking, and we never sell your data.
• Your location is never stored. It is used only on your own device, at the moment you ask for “shops near me”.
• Notifications are local. Event reminders are created and scheduled by your phone, not by our servers.
• You can delete your account yourself, at any time, directly in the app — see section 10.

3. What data we process and why

3.1 Using the app without an account

If you simply browse content, we ask for no personal data. As with any internet service, our server (Supabase, located in Ireland) technically processes the data needed to deliver a response — including your IP address and device type — as part of security logs. This data is not used to build user profiles.

3.2 Creating an account

When you register, we collect the following:

To prevent automated sign-ups (abuse/spam), our server temporarily counts registration requests per IP address. This counter is held only in temporary memory and is not written to the database.

3.3 Favourites

If you save a venue or event as a favourite, that link is stored in your account on the server. Some bookmarks are also stored only locally on your phone and never leave it.

3.4 Venue reservations

When you make a reservation we collect: your name, phone number, e-mail address, party size, date and time, your notes, and your preferred contact method (WhatsApp, Viber or SMS). This data is made available to the manager of that venue so they can confirm or decline the reservation and contact you. Without it, a reservation cannot be processed.

3.5 Content you upload

Venue managers, organisers, municipal staff, embassy staff and ministry staff can upload venues, events, photos, flyers, menus and cultural-heritage records. This content is stored in Supabase Storage and is publicly visible inside the app. Please do not upload photos or text containing other people's personal data without their consent.

3.6 Reporting and blocking

The app lets you report inappropriate content and block other users. We store the report, the reported content and your account identifier so that moderators can review the case. Blocks are stored so we can hide that user's content from you.

3.7 Contracts and invoices (business accounts only)

For venues with a subscription we store the contract, payments, payment status and the VAT invoice (PDF). Invoices and contracts are kept in a private area of the server and are opened only through a temporary signed link. When a subscription is about to expire, a reminder e-mail is sent to the venue manager.

3.8 “Last seen” status

When you open the app while signed in, the time of your last activity (last seen) is stored. This helps administrators see who is currently active and manage users. We do not record a history of your movements inside the app.

3.9 Crash reports — iPhone only

The iPhone version uses Google's Firebase Crashlytics so we learn when the app stops unexpectedly and can fix it. Technical data is sent: device model, operating system version, app version and the crash stack trace. No name, e-mail address or content of yours is sent.

4. Device permissions the app asks for

The app does not request access to your camera, contacts, microphone or health data. You can withdraw any permission at any time in your device settings; some features will then no longer work.

5. Legal bases (Art. 6 GDPR)

6. Who we share data with

We do not sell your data and never pass it on for advertising. Data is processed on our behalf only by the following providers, under data processing agreements:

Beyond this, data may be disclosed to competent authorities where we are legally required to do so.

Inside the app: a venue manager sees the reservations made for their own venue; the administrator of your municipality sees account requests from that municipality. Your data is not shown to other users apart from your username and profile photo.

7. Where your data is stored, and transfers outside the EU

Transfers outside the EU happen only in these limited cases:

• Dardania Live SH.P.K. is established in the Republic of Kosovo, which is not part of the European Union and is not covered by an adequacy decision of the European Commission. Our authorised staff may view data from Kosovo in order to run the service and support users.
• Resend — when a confirmation e-mail or payment reminder is sent to you (USA).
• Google / Firebase Crashlytics — technical crash data only, and only in the iPhone version (USA).
• Vercel Inc. — technical access logs when you open our websites (USA).
• Apple and Google — downloading and updating the app through their stores (USA).

For these transfers we rely on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where location, notifications or your profile photo are concerned, on your explicit consent (Art. 49(1)(a) GDPR). For a copy of the relevant safeguards, write to info@dardanialive.com.

8. How long we keep your data

• Account data, profile, favourites: for as long as your account exists. When you delete your account, this data is deleted too.
• Reservations: kept as long as needed to carry out the reservation and to resolve any complaints.
• Public content (venues, events, photos uploaded by managers): stays published until removed by you, by the venue manager, or by our administration.
• Reports and blocks: kept as long as needed for moderation and as a record of decisions.
• Contracts and invoices: kept for the retention period required by Kosovo tax and accounting law, even after the account is closed.
• Crash reports: kept by Firebase Crashlytics under Google's standard retention periods (currently up to 90 days).

9. Your rights

Under the GDPR you have the following rights:

• Right of access (Art. 15) — to learn what data we hold about you.
• Right to rectification (Art. 16) — to correct inaccurate data. Most of it you can change yourself under “Edit profile”.
• Right to erasure (Art. 17) — the “right to be forgotten”.
• Right to restriction (Art. 18) — to restrict processing.
• Right to data portability (Art. 20) — to receive your data in a machine-readable format.
• Right to object (Art. 21) — to object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3)) — at any time, without affecting past processing.
• Right to lodge a complaint (Art. 77) — with the supervisory authority of the country where you live. In Kosovo this is the Information and Privacy Agency (AIP); in Germany the authority of your federal state; in Switzerland the FDPIC.

To exercise these rights, write to info@dardanialive.com. We reply within one month. So that we do not hand your data to the wrong person, we may ask you to write from the e-mail address your account is registered with.

10. How to delete your account

11. Children and minimum age

The app is not directed at children and we do not knowingly collect data from them. On the App Store the app is rated 13+, because it contains information about nightlife venues and events where alcohol is served.

For users in the European Union, the limit in Art. 8 GDPR applies: people under 16 may create an account only with the consent of a parent or legal guardian. If we learn that an account belongs to a child without such consent, we delete it. Parents can contact us at info@dardanialive.com.

12. Data security

• All communication between the app and the server is encrypted with HTTPS/TLS.
• Our servers are located inside the European Union (Ireland).
• Passwords are stored only as a hash — neither we nor our staff can read them.
• The database is protected by row-level security rules: each user sees only what their role allows.
• Contracts and invoices are stored in a private area and opened only via temporary links.
• Device backups are disabled for the Android app.

13. Our website

dardanialive.com and dardanialive.app are informational websites.

• We use no advertising cookies and no tracking analytics tools.
• We store only one technical value in your browser (kl_lang) holding the language you chose. It stays on your device and is not sent to us.
• The “Urbanist” typeface is loaded from Google Fonts. In doing so, your IP address is transmitted to Google. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in a consistent presentation.
• The sites are hosted by Vercel Inc. (USA); the domains are registered with IONOS. Vercel keeps technical access logs (IP address, time, page requested, browser type) for security and stability reasons.

14. Changes to this policy

When we add new features or change how we process data, we update this document. The date of the last update is shown at the top of this page. For substantial changes we notify you in the app or by e-mail. Please check this page from time to time.

15. Contact us

Effective from 19 August 2026. The Albanian version is the original text; this English version is provided for convenience.